JP6518158B2 - Vehicle and communication method of vehicle - Google Patents

Description

  The present invention relates to a vehicle and a communication method of the vehicle.

  A vehicle equipped with an automatic transmission and a driving power source such as an engine or a motor is configured to be communicable between an external device such as a fault diagnostic tester and a control unit of the vehicle via an interface such as an ODB connector.

  As such a vehicle, the transmission of a continuously variable transmission in which information such as a fixed gear ratio can be changed by changing the contents of a rewritable memory of the vehicle by a failure diagnosis tester connected via a failure diagnosis connector A ratio control device is disclosed (see Patent Document 1).

Unexamined-Japanese-Patent No. 2003-106431

  The prior art described in Patent Document 1 is configured to be able to read and write data relating to the transmission gear ratio of a continuously variable transmission via a fault diagnostic tester. In such a configuration, by connecting a diagnostic device such as a fault diagnostic tester, it is possible to freely read and write data related to the behavior of the vehicle, and obtain data that you do not want to disclose to a third party, which affects the behavior of the vehicle. It will be possible to change data.

  On the other hand, it is possible to restrict the exchange of information with an external diagnostic device, but there is the inconvenience that the reading of data when necessary, such as analysis at a car maker or parts maker, is restricted. Had the problem of

  The present invention has been made in view of such problems, and it is an object of the present invention to provide a vehicle that authenticates communication between a control unit of the vehicle and an external device by input of a cryptographic operation.

According to an embodiment of the present invention, a drive device for driving a vehicle, an operating device operated by a driver, a control unit for controlling the driving device based on the operation of the operating device, an external device and a control unit A communication unit that mediates communication, and the communication unit authenticates the communication unit and the control unit when the driver inputs an encryption operation to the operation device, and when the authentication is performed, the communication unit receives an external device When the communication request is received, the external device is authenticated, and communication between the external device and the control unit is permitted.

  According to the above aspect, since the communication between the external device and the communication unit can be performed only when the authentication between the communication unit and the control unit and the authentication between the external device and the communication unit are performed, the security of the communication of the control unit to the external device is improved be able to.

BRIEF DESCRIPTION OF THE DRAWINGS It is explanatory drawing which shows an example of a structure of the vehicle centering on the automatic transmission of embodiment of this invention. It is a flowchart of the control which ATCU and GW of embodiment of this invention perform. It is explanatory drawing which shows the predetermined | prescribed operation performed by the user of embodiment of this invention.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 1 is an explanatory view showing an example of the configuration of a vehicle 100 centering on an automatic transmission 3 according to an embodiment of the present invention.

  The vehicle 100 includes a drive device including an engine 1 and an automatic transmission 3, an engine control unit 30 that controls the operation of the engine 1, and a transmission control unit 40 that controls the operation of the automatic transmission 3.

  The rotation of the crankshaft 11 driven by the engine 1 is transmitted to the automatic transmission 3 via the torque converter 2 and the input shaft 12. The automatic transmission 3 shifts the input rotation and outputs it to the output shaft 13. The rotation of the output shaft 13 is transmitted to the wheels 6 via the final reduction gear 4 and the axle 14, whereby the vehicle 100 moves forward and backward.

  The torque converter 2 includes a lockup clutch, and is controlled to the converter state and the lockup state by oil pressure.

  The automatic transmission 3 has a primary pulley 31 coupled to the input shaft 12, a secondary pulley 32 coupled to the output shaft 13 disposed in parallel with the input shaft 12, and between the primary pulley 31 and the secondary pulley 32. It is configured as a belt-type continuously variable transmission mechanism including an endless belt (V-belt) 33 to be passed around.

  The primary pulley 31 and the secondary pulley 32 are provided with a hydraulic chamber, and by adjusting the hydraulic pressure supplied from the hydraulic control device 20, the width of the V groove changes and the V-belt 33, the primary pulley 31 and the secondary pulley 32 The contact radius changes, and the transmission ratio of the automatic transmission 3 changes steplessly.

  The hydraulic control device 20 includes an oil pump, and supplies hydraulic pressure to each hydraulic chamber of the primary pulley 31 and the secondary pulley 32 of the automatic transmission 3 as indicated by a dotted line in FIG. The hydraulic control device 20 also supplies hydraulic oil to the torque converter 2 and bearings of the automatic transmission 3, gears and the like.

  An engine control unit (hereinafter referred to as "ECU") 30 receives an ignition ON signal sent from an ignition switch 54, an accelerator opening signal sent from an accelerator pedal 52, and a brake signal sent from a brake pedal 53, The engine 1 is driven based on the received signal.

  The transmission control unit (hereinafter referred to as “ATCU”) 40 controls the hydraulic pressure supplied by the hydraulic control device 20 to control the operation of the automatic transmission 3. The ATCU 40 determines the transmission gear ratio of the automatic transmission 3 based on the range signal sent from the inhibitor switch 51 that outputs a signal in conjunction with the operation of the shift lever 50 by the driver and the engine operation signal sent from the ECU 30. Control signal to the hydraulic control device 20.

  A gateway 45 is connected to the ATCU 40. The gateway (hereinafter, referred to as “GW”) 45 has a connector 47. The connector 47 is configured to be connectable to the diagnostic device 80 via the cable 81. The connector 47 is composed of, for example, an ODB connector.

  The GW 45 is a communication unit that controls communication between the diagnostic device 80 and the ATCU 40, and determines whether the diagnostic device 80 can communicate with the ATCU 40 by control described later.

  Next, the operation of the GW 45 will be described.

  The GW 45 is a predetermined operation (hereinafter referred to as “encryption operation”) that permits communication of the diagnostic device 80 to which the operation performed by the user is connected when the diagnostic device 80 is connected to the connector 47. In some cases, communication between the diagnostic device 80 and the ATCU 40 is permitted.

  FIG. 2 is a flowchart of control performed by the ATCU 40 and the GW 45 according to this embodiment.

  The flowchart shown in FIG. 2 is executed at predetermined intervals (for example, every 10 ms) in ATCU 40 and GW 45.

  In step S10, the ATCU 40 determines whether an ignition ON signal has been sent from the ignition switch 54 via the ECU 30. If it is determined that the ignition ON signal has been sent, the process proceeds to step S20. If the ignition ON signal has not been sent, the processing of this flowchart ends.

  In step S <b> 20, the GW 45 determines whether the diagnostic device 80 is connected to the connector 47. If it is determined that the diagnostic device 80 is connected to the connector 47, the process proceeds to step S30. At this time, the GW 45 records the ID and the like transmitted from the diagnostic device 80. If the diagnostic device 80 is not connected to the connector 47, the processing of this flowchart ends.

  In step S30, the ATCU determines, based on the accelerator opening signal and the brake signal sent via the ECU 30, and the range signal sent from the inhibitor switch 51, whether or not the encryption operation for permitting the communication of the diagnostic device 80 has been performed. .

  If it is determined that the encryption operation has been performed, the process proceeds to step S50. If it is determined that the predetermined operation is not an encryption operation, the process proceeds to step S40, and the ATCU 40 repeats the process of step S20 until a predetermined time has elapsed since the encryption operation was performed. If it is determined that the predetermined time has elapsed, the processing of this flowchart ends.

  The trigger of the predetermined time in step S40 may be when the first operation (for example, operation (2) in FIG. 3) in the cryptographic operation is performed, or when the ignition ON signal is sent.

  The predetermined operation in step S30 will be described later with reference to FIG.

  In step S50, the ATCU 40 transmits a seed signal to the GW 45.

  When the seed signal is transmitted from the ATCU 40, the GW 45 transmits a Key signal to the ATCU 40 in step S60.

  Next, in step S70, the ATCU 40 that receives the Key signal creates a response signal calculated by the predetermined algorithm predetermined for the Key signal, and transmits the response signal to the GW 45. The GW 45 collates the response signal from the AUCT 40 to the Key signal with the result calculated by a predetermined algorithm inside the GW 45. If the two match, the GW 45 permits communication between the diagnostic device 80 and the ATCU 40.

  When the communication is permitted, the process proceeds to step S80, and the GW 45 requests the ATCU 40 for a response corresponding to the ID of the diagnostic device 80 acquired in step S20. The ATCU 40 responds with data corresponding to the request.

  As described above, when the operation performed by the user in step S30 is an encryption operation, the communication of the diagnostic device 80 can be permitted by the process shown in the flowchart of FIG.

  In step S80, when the GW 45 permits the communication of the diagnostic device 80, the permission may be continued until the ignition switch 54 is turned off, and control is performed so that only the communication for the ID acquired in step S20 is permitted. May be Alternatively, the communication may be permitted only for a predetermined time (for example, 5 minutes) after the communication is permitted in step S70.

  Next, the predetermined operation in step S30 will be described.

  FIG. 3 is an explanatory view showing a predetermined operation performed by the user of the present embodiment.

  In the present embodiment, the GW 45 determines whether “encryption operation” which is not normally performed is performed by the brake pedal 53, the accelerator pedal 52, and the shift lever 50, and permits the communication of the diagnostic device 80.

  The cryptographic operation is obtained by a combination of the operations shown in FIG.

  The ignition switch 54 is in a state where the ATCU 40, the GW 45, etc. operate when the ignition is ON.

  The shift lever 50 selects one of the P range, the N range, the D range, and the L range.

  The brake pedal 53 is selected to be on (brake pedal 53 is depressed) or off (brake pedal is released).

  The accelerator pedal 52 is selected to be off (TVO = 0), on (0 <TVO ≦ 8/8), full throttle (TVO = 8/8), and the like. In addition, an intermediate opening (for example, TVO = 3/8 ± α, TVO = 2/8 to 4/8) may be selected. This α is set to a value in consideration of the difference in the amount of depression by the operator.

  For example, the encryption operation completes the operation of moving the operating device of FIG. 3 in a complex manner within a predetermined time (for example, 10 seconds).

  Such an operation is an operation that can not be performed by a normal user, and a normal user can not perform a series of these operations in a short time of a predetermined time.

  Therefore, setting such an encryption operation in advance makes it extremely difficult for the diagnosis device 80 and the ATCU 40 to communicate even if the diagnosis device 80 is connected by a third party who does not know the encryption operation. . Thereby, security of reading and writing of data to ATCU 40 mounted in vehicles can be improved.

  Note that the above-described cryptographic operation is an example, and various combinations can be taken.

  For example, while the accelerator pedal 52 is easily depressed by a third party when the foot is released or full throttle, it is possible to set the encryption operation to the intermediate opening degree of the accelerator pedal 52. It is difficult for third parties who do not know that to perform cryptographic operations.

  Then, by setting the combination of the operation of the accelerator pedal 52, the brake pedal 53 and the shift lever 50 as the encryption operation, it becomes extremely difficult for a third party to perform the encryption operation, and to the ATCU 40 mounted in the vehicle. Security of reading and writing of data can be improved. When the encryption operation includes the operation of the accelerator pedal 52, it is desirable to perform ignition ON in a state where the driving power source such as the engine 1 is not operated for the sake of safety.

  As described above, in the embodiment of the present invention, the driving device including the engine 1 for driving the vehicle 100 and the automatic transmission 3 and the operation including the accelerator pedal 52 operated by the driver, the brake pedal 53 and the shift lever 50 Device, an ATCU 40 that controls the drive device based on the operation of the operating device, and a GW 45 (communication unit) that mediates communication between the external device such as the diagnostic device 80 and the ATCU 40; When the cryptographic operation is input, the GW 45 and the ATCU 40 are authenticated. When the authentication is performed, when the communication request from the diagnostic device 80 is received, the diagnostic device 80 is authenticated, and the diagnostic device 80 is authenticated. And allow communication between ATCU 40 and ATCU 40.

  With this configuration, communication can be performed only when the GW 45 and the ATCU 40 are authenticated, and the diagnostic device 80 and the GW 45 are each authenticated. Therefore, the security of the communication between the diagnostic device 80 and the ATCU 40 is improved. It can be improved. This effect corresponds to claims 1 and 5.

  Further, in the embodiment of the present invention, the GW 45 prohibits the authentication between the GW 45 and the ATCU 40 when the input of the cryptographic operation is not completed within the set time after the start of the predetermined operation on the controller device. The security of the communication between the diagnostic device 80 and the ATCU 40 can be improved by starting the count triggered by the operation and not performing the authentication if the cryptographic operation is not completed within the set time. This effect corresponds to claim 2.

  Further, in the embodiment of the present invention, the operating device has an accelerator pedal 52, and the encryption operation is performed to an intermediate opening degree at which the accelerator pedal 52 is depressed and the opening degree of the accelerator pedal 52 is not maximum. Since it is included, the security of the communication between the diagnostic device 80 and the ATCU 40 can be improved by setting it to a value avoiding the maximum opening degree (full throttle) that may be attempted by a third party. . This effect corresponds to claim 3.

  Further, in the embodiment of the present invention, the operating device has an accelerator pedal 52, a brake pedal 53 and a shift lever 50, and the encryption operation comprises at least two of the accelerator pedal 52, the brake pedal 53 and the shift lever 50. Since the simultaneous operation is included, the security of the communication between the diagnostic device 80 and the ATCU 40 can be improved by setting the cryptographic operation more complicated. This effect corresponds to claim 4.

  As mentioned above, although embodiment of this invention was described, the said embodiment shows only one of the application example of this invention, and the main point which limits the technical scope of this invention to the specific structure of the said embodiment is not.

  In the present embodiment, the automatic transmission 3 has been described by way of example of the belt type continuously variable transmission configured by stretching a belt around a set of pulleys, but the invention is not limited thereto. The automatic transmission 3 may be a stepped transmission, or may be a combination of a continuously variable transmission and a stepped transmission.

  Further, in the present embodiment, although the drive device has been described as an example including the engine 1, the present invention is not limited to this. The drive device may be a HEV (Hybrid Electric Vehicle) equipped with an engine, a motor and an automatic transmission, or may be an EV (Electric Vehicle) equipped with a motor and an automatic transmission.

1 engine 2 torque converter 3 automatic transmission 20 hydraulic control unit 30 engine control unit (ECU)
40 Transmission Control Unit (ATCU)
45 gateway (GW, communication unit)
47 connector 50 shift lever 51 inhibitor switch 52 accelerator pedal 53 brake pedal 54 ignition switch 80 diagnostic device (external device)

Claims (5)

A driving device for driving a vehicle;
An operating device operated by a driver,
A control unit that controls the drive device based on the operation of the operation device;
A communication unit that mediates communication between an external device and the control unit;
Equipped with
The communication unit is
When the driver inputs a predetermined encryption operation on the operating device, to authenticate with the control unit and the communication unit,
When the authentication is performed, when a communication request from the external device is received, the external device is authenticated, and communication between the external device and the control unit is permitted. vehicle. In the vehicle according to claim 1,
The communication unit is characterized by prohibiting authentication between the communication unit and the control unit when the input of the cryptographic operation is not completed within a set time after a predetermined operation on the operation device is started. That the vehicle. In the vehicle according to claim 1 or 2,
The operating device has an accelerator pedal,
A vehicle characterized in that the encryption operation includes an operation in which the accelerator pedal is depressed and an opening degree of the accelerator pedal is not maximum. A vehicle according to any one of claims 1 to 3, wherein
The operating device includes an accelerator pedal, a brake pedal, and a shift lever.
A vehicle characterized in that the encryption operation includes simultaneously operating at least two of the accelerator pedal, the brake pedal, and the shift lever. A drive unit for driving a vehicle, an operation unit operated by a driver, a control unit for controlling the drive unit based on the operation of the operation unit, and a communication unit for mediating communication between an external device and the control unit And a method of communicating a vehicle comprising
Authenticating the communication unit and the control unit when the driver inputs an encryption operation to the operation device;
When the authentication is performed, when a communication request from the external device is received, the external device is authenticated, and communication between the external device and the control unit is permitted. Vehicle communication method.

Images